Title: Beaware about virus [QnodeCoin] Post by: Bitcoinsummoner on May 30, 2020, 01:18:37 PM What happened: Virus on their wallet
Link of virus: Quote https://www.qngnode.cc/wp-content/uploads/2020/03/qnodecoin-qt-linux.tar.gz Announcement thread: https://bitcointalk.org/index.php?topic=5252100 Archive: http://archive.is/KdQ65 Scammer profile link: https://bitcointalk.org/index.php?action=profile;u=57528 Screenshot from virus total: https://image.prntscr.com/image/qbVcye-RRjqtsKpFh8Flaw.png Title: Re: Beaware about virus [QnodeCoin] Post by: bL4nkcode on May 30, 2020, 02:22:42 PM Most qt wallets are detected with malware even the bitcoin-qt (https://www.virustotal.com/gui/file/69e4d7f710a29be6ead2ef5da2905736b7cea107213ae6ddde3bcca8affbb8fd/detection) wallet on virustotal. Which you can't assure the legitimacy of the report not unless the source code of the software was audited by the open-source community without any issue. Considering this is a new wallet/project I'm skeptical of using them in any way.
Title: Re: Beaware about virus [QnodeCoin] Post by: Rikafip on May 30, 2020, 03:15:30 PM Most qt wallets are detected with malware even the bitcoin-qt (https://www.virustotal.com/gui/file/69e4d7f710a29be6ead2ef5da2905736b7cea107213ae6ddde3bcca8affbb8fd/detection) wallet on virustotal. Which you can't assure the legitimacy of the report not unless the source code of the software was audited by the open-source community without any issue. True, Virus Total might give false results, but in this case there is no question what's going on. There are several red flags beside Virus Total result:
@OP Best place to report fake ANN threads with malware is this thread in Meta Report Malware and Suspicious Links here so Mods can take Action ! (https://bitcointalk.org/index.php?topic=5182222.0). Every day there are several attempts like that, so when you come across them, just make a post there, and don't forget to report the thread to mods so it gets deleted before someone downloads it. Title: Re: Beaware about virus [QnodeCoin] Post by: nutildah on May 30, 2020, 03:44:37 PM Just for "fun" I downloaded the file, unzipped it, and sent the QT file back to VirusTotal (http://contents of the). Indeed, it appears as some scanners are just declaring the coin miner as a virus. I also scanned it with my Malwarebytes which didn't find anything... The link to the Windows wallet doesn't even work.
What's weird, however, is that they already released an ANN for this project (https://bitcointalk.org/index.php?topic=5227513.0) back in February. The user account promoting the current ANN (https://bpip.org/profile.aspx?p=xiaxiao8) is from 2012 and has zero previous posts -- no way that's an original account, was probably bought sometime in August 2018. In any case, no decent reason to get involved with this project. Edit: just saw the post by Rikafip, yes I agree |